Remote Cyber security Jobs · Application Security

Job listings

  • Lead and scale security at BioRender, setting the vision for AI-powered product security.
  • Partner with engineering to evolve secure development practices and maintain SOC 2 and ISO 27001.
  • Own customer-facing security narrative and build a company-wide security culture.

BioRender is a science communication platform helping researchers create and share scientific figures. It is a remote-first, Y Combinator-backed SaaS company with a collaborative culture and millions of users worldwide.

  • Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
  • Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
  • Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.

They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.

  • Operate and maintain application security scanning tools including SAST, SCA, secrets scanning, and container scanning throughout the SDLC.
  • Review and triage security findings, validate true positives, and collaborate with engineering teams to prioritize remediation activities.
  • Support onboarding of new repositories, maintain documentation, and assist with scripting and automation to improve security workflows.

This company is a partner organization with a collaborative security team focused on strengthening application security across a diverse portfolio of digital products and services. It fosters an inclusive, collaborative culture with employee communities and emphasizes learning and development.

  • Define and own a risk-based security strategy for a financial platform, prioritizing by real threat and business impact.
  • Lead incident response, application security, cloud and infrastructure hardening, and compliance programs like SOC 2.
  • Build and mentor a security team and security champions network, embedding security as an enabler across engineering.

Airtm is a financial-infrastructure company building the future of the online-work economy with stablecoin-based cross-border payment solutions. It is a fast-growing, mission-driven engineering organization focused on empowering digital entrepreneurs in the Global South.

US Canada UK Unlimited PTO 18w maternity 12w paternity

  • Own the product security research agenda and turn emerging threats into strategy.
  • Partner with Product, Engineering, and Security leadership to shape roadmap decisions.
  • Represent Chainguard externally through talks and thought leadership to advance the industry.

Chainguard delivers hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. They are a venture-backed, remote-first company serving Fortune 500 enterprises and global leaders, with a culture focused on customer obsession and intentional action.

$40–$80/hr

  • Design and implement application security test environments focused on OWASP risks in LLM applications.
  • Develop deterministic test cases and evaluation frameworks to distinguish vulnerable from secure code.
  • Collaborate with security specialists remotely to refine testing methodologies and advance AI-powered security analysis.

The company specializes in application security, AI security, and building advanced security evaluation tools. It operates as a fully remote, technically driven team that values collaboration, precision, and continuous improvement.

$170,000–$190,000/yr
US Unlimited PTO

  • Own application and product security, including threat modeling, secure code review, and access-control and secrets-exposure flaws.
  • Design and implement security architecture for an agentic AI software development lifecycle with out-of-band controls.
  • Secure AWS environment, manage non-human identities, and enforce security tooling across GitHub and SaaS estate.

Oshi Health is a fully remote, cloud-native healthcare platform dedicated to helping people manage chronic GI conditions. It is a growing company with a small cross-functional team, emphasizing a remote-first culture and equity-based compensation.

Global 4w PTO

  • Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
  • Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
  • Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.

Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.

$105,820–$135,420/yr

  • Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
  • Define how we pentest AI, including LLM applications and agent-generated code.
  • Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.

We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.

  • Own and run bug bounty programs and external audit engagements, triaging and validating fixes.
  • Secure code and software supply chain, including CI/CD defenses, dependency controls, and signing.
  • Build anti-scam, anti-abuse, and security tooling with static/dynamic analysis and LLM-driven agents.

Mysten Labs builds foundational blockchain infrastructure and products, including Sui and Move, to advance the internet and enable the agent economy. It is a remote-first, world-class team backed by a $300M Series B from leading venture funds.